» itunesinstall.exe
Overview
Analysis
File Details
Programs (2)
Downloads (49)

itunesinstall.exe

iTunes

Apple Inc.

This is a self-extracting archive and installer. This is installed with multiple programs including iTunes. The file has been seen being downloaded from secure-appldnld.apple.com and multiple other hosts.

File name:

itunesinstall.exe

Publisher:

Apple Inc. (signed and verified)

Product:

iTunes

Description:

iTunes Installer

Version:

11.1.4.62

MD5:

3994856bb093e3623b97cde0709b233e

SHA-1:

fd9caee83907b9f6aa01d031f63fa9ed9be2bfab

SHA-256:

e1ad381c7492dc79eeeafbd0ddf2ece605f4ee5cbfdc703808fb1fb77e931d58

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 4:11:45 AM UTC (today)

File size:

142 MB (148,904,784 bytes)

Product version:

11.1.4.62

Original file name:

iTunesSetup.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\itunes\itunesinstall.exe

Digital Signature

Signed by:

Apple Inc.

Authority:

VeriSign, Inc.

Valid from:

5/23/2013 8:00:00 PM

Valid to:

7/23/2015 7:59:59 PM

Subject:

CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

47DE2F9FBF7A1D4191F45773FA113E1D

File PE Metadata

Compilation timestamp:

1/20/2014 8:05:20 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3145728:p47tZek4Me1yxLkfq0KTC7XAq24kqlVNrBwjg+RqhMMb69w4:W7tW9yPuDAqSq9rBwjgCdMb69w4

Entry address:

0xDF28

Entry point:

48, 83, EC, 28, E8, 97, 50, 00, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, 48, 89, 0D, ED, F2, 00, 00, C3, 40, 53, 48, 81, EC, E0, 05, 00, 00, 83, 64, 24, 70, 00, 48, 8D, 4C, 24, 74, 33, D2, 41, B8, 94, 00, 00, 00, E8, 6C, C9, FF, FF, 4C, 8D, 5C, 24, 70, 48, 8D, 84, 24, 10, 01, 00, 00, 48, 8D, 8C, 24, 10, 01, 00, 00, 4C, 89, 5C, 24, 48, 48, 89, 44, 24, 50, FF, 15, 57, 72, 00, 00, 48, 8B, 9C, 24, 08, 02, 00, 00, 48, 8D, 54, 24, 40, 48, 8B, CB, 45, 33, C0, E8, 19, 68, 00, 00, 48, 85, C0, 74, 3B, 48, 83... 
[+]

Entropy:

7.9999 (probably packed)

Code size:

79 KB (80,896 bytes)

The file itunesinstall.exe has been discovered within the following programs.

iTunes by Apple Inc.

Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad.

www.apple.com/itunes

9% remove it

MyHarmony by Logitech Inc.

3% remove it

The file itunesinstall.exe has been seen being distributed by the following 49 URLs.

https://secure-appldnld.apple.com/itunes12/.../iTunes64Setup.exe

http://letoltes.szoftverbazis.hu/_Uow57ruO6EQGZCLD29BTw/1481990621/.../iTunes64Setup.exe

http://lb.cdn.m6web.fr/d/c/a/03eafc1d6541af127752fea3a0162eb6/530ba101/soft/.../itunes_11-1-4_fr_11140_64.exe

http://cdn.xmediadelivery.com/c?x=aqWKYuNxbhn3svdTHm5ES8W6gNKwYv8WC08Qy1ZEL0E=&c=ifeoUl94U8Ir1r7nZ VawlIIEoLXYRgnWMEJSrAd8wCx6kA6AzvB5aGStCj4R3byXbhyI0LYdrAQG3UcJyDkZw==&fallback_url=

http://www.filehippo.com/download/file/.../

temp:iTunesSetup_11.1.4.62_x64.exe

http://x.chip.de/downloads/extern/desktop/?bid=6276813&c=c3262e18a265b3b8c209bfc4ad44e4e1&url=https://secure-appldnld.apple.com/iTunes11/.../iTunes64Setup.exe&pagetitle=iTunes (64 Bit)&container_id=35392791&abc=Download&channel=Downloads&subchannel=Audio & Video&subsubchannel=Mediaplayer

http://www.gezginler.net/indir/v/2865/.../

http://www.filehippo.com/download/file/.../

http://www.commentcamarche.net/download/.../telecharger-34098345-itunes-64-bits

http://www.techtudo.com.br/_/software/.../download

http://appldnld.apple.com/iTunes10/.../iTunes64Setup.exe

http://appldnld.apple.com/iTunes9/.../iTunes64Setup.exe

http://www.techspot.com/downloads.php?action=download_now&id=4722&evp=5509000cbd1716c25662843c7d7f1571&file=1

https://secure-appldnld.apple.com/iTunes11/.../iTunes64Setup.exe

http://appldnld.apple.com/iTunes10/.../iTunes64Setup.exe

http://www.filehippo.com/it/download/file/.../

http://appldnld.apple.com/iTunes10/.../iTunes64Setup.exe

http://www.filehippo.com/download/file/.../

http://dl9.download.fi/download/783407218de8c80a92bf850da466b95b/52e824fe/.../iTunes64Setup_v11.1.4.exe

http://www.download.fi/.../download.cfm?version_id=76477&software_id=1943&mirror_id=0&installer=0

http://filehippo.com/download/file/.../

http://filehippo.com/es/download/file/.../

https://secure-appldnld.apple.com/iTunes11/.../iTunes64Setup.exe

http://appldnld.apple.com/iTunes11/.../iTunes64Setup.exe

http://filehippo.com/download/file/.../

http://download.informer.com/.../itunes64setup.exe

Latest 30 of 49 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.